From 9c2ca46391ea2ba089d5d082a0dbdd3b15b28498 Mon Sep 17 00:00:00 2001 From: Laurent Pinchart Date: Wed, 5 Jun 2024 10:30:55 +0300 Subject: libcamera: dma_buf_allocator: Create memfd with CLOEXEC Ensure that the memfd file descriptor won't be leaked to child processes by creating it with MFD_CLOEXEC. Fixes: ea4baaacc325 ("libcamera: DmaBufAllocator: Support allocating from /dev/udmabuf") Signed-off-by: Laurent Pinchart Reviewed-by: Hans de Goede Reviewed-by: Kieran Bingham --- src/libcamera/dma_buf_allocator.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libcamera/dma_buf_allocator.cpp b/src/libcamera/dma_buf_allocator.cpp index 5ae51721..5ec29949 100644 --- a/src/libcamera/dma_buf_allocator.cpp +++ b/src/libcamera/dma_buf_allocator.cpp @@ -132,7 +132,7 @@ UniqueFD DmaBufAllocator::allocFromUDmaBuf(const char *name, std::size_t size) std::size_t pageMask = sysconf(_SC_PAGESIZE) - 1; size = (size + pageMask) & ~pageMask; - int ret = memfd_create(name, MFD_ALLOW_SEALING); + int ret = memfd_create(name, MFD_ALLOW_SEALING | MFD_CLOEXEC); if (ret < 0) { ret = errno; LOG(DmaBufAllocator, Error) -- cgit v1.2.1